[GTER] NAS PPPoE CISCO

[Joester Brondani]

Amigo, certamente há algum pequeno detalhe te faltando, veja que é case 
sensitive entao qualquer minuscula/maiuscula diferente , já nao aloca a 
policy.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-mt/sec-usr-aaa-15-mt-book/define_interface_policy_map_av_pairs_aaa.pdf


Abcs

Joéster


Em 20/12/2017 17:06, Michael Stein escreveu:
> Boa tarde,
>
>
> criei uma policy pra 10/5mb,
>
>
>   Policy Map Fibra_10_Mb-up
>      Class class-default
>       police cir 5120000 bc 160000
>         conform-action transmit
>         exceed-action drop
>
>    Policy Map Fibra_10_Mb-down
>      Class class-default
>       police cir 10240000 bc 320000
>         conform-action transmit
>         exceed-action drop
>
>
>
> Quando o cliente autentica, da essa informaçao no debug:
>
>
> *Dec 20 19:05:17.453: RADIUS:  Vendor, Cisco       [26]  24
> *Dec 20 19:05:17.453: RADIUS:   Sub_Policy_In      [37]  18  "Fibra_10_Mb-down"
> *Dec 20 19:05:17.453: RADIUS:  Vendor, Cisco       [26]  22
> *Dec 20 19:05:17.453: RADIUS:   Sub_Policy_Out     [38]  16  "Fibra_10_Mb-up"
>
>
>
> porem, nao esta controlando a banda do cliente, se der um "show policy-map interface virtual-access ..." nao mostra nada,
>
> estou utilizando mk solutions.
>
> desde ja agradeço ao apoio.
>
>
> Att;
> Michael Stein
>
>
>
> ________________________________
> De: gter <gter-bounces at eng.registro.br> em nome de Bruno Viviani <bruno at semprenet.com.br>
> Enviado: quarta-feira, 20 de dezembro de 2017 08:35
> Para: Grupo de Trabalho de Engenharia e Operacao de Redes
> Assunto: Re: [GTER] NAS PPPoE CISCO
>
> #CRIE O POLICY MAP
>
> policy-map DOWN-100M
>   class class-default
>    police 100000000 6250000
>
> policy-map UP-100M
>   class class-default
>    police 100000000
>
> # RADIUS NO GROUP REPLY OU USER REPLY
> Fibra100M Cisco-AVpair += sub-qos-policy-in=UP-100M
> Fibra100M Cisco-AVpair += sub-qos-policy-out=DOWN-100M
>
> att,
> Bruno Viviani
>
>
> Em 19 de dezembro de 2017 18:22, Michael Stein <michafelipe at hotmail.com>
> escreveu:
>
>> Boa tarde,
>>
>> Obrigado Bruno, funcionou com parte dessas configuraçoes,
>>
>>
>> preciso fazer as policy-map para as queues dos clientes, alguem tem algum
>> exemplo de configuraçoes das mesmas?
>>
>>
>> Desde ja agradeço.
>>
>>
>> Att;
>>
>> Michael Stein
>>
>>
>> ________________________________
>> De: gter <gter-bounces at eng.registro.br> em nome de Bruno Viviani <
>> bruno at semprenet.com.br>
>> Enviado: segunda-feira, 18 de dezembro de 2017 11:14
>> Para: Grupo de Trabalho de Engenharia e Operacao de Redes
>> Assunto: Re: [GTER] NAS PPPoE CISCO
>>
>> Aqui usamos...
>>
>> aaa accounting delay-start all
>> aaa accounting update periodic 120
>> aaa accounting include auth-profile framed-ip-address
>> aaa accounting include auth-profile framed-ipv6-prefix
>> aaa accounting include auth-profile delegated-ipv6-prefix
>> aaa accounting network default start-stop group radius
>>
>> isso deve fazer ele inserir os accounting...
>>
>>
>> att,
>> Bruno Viviani
>>
>>
>> Em 18 de dezembro de 2017 12:38, Michael Stein <michafelipe at hotmail.com>
>> escreveu:
>>
>>> Boa tarde,
>>>
>>> alguem na lista que tenha em seu cenario um roteador cisco como
>>> concentrador pppoe?
>>>
>>> estou tentando configurar o incoming dele para receber as requisiçoes de
>>> desconexao enviadas pelo radius,
>>>
>>>
>>> alguem que possa auxiliar?
>>>
>>>
>>> desde ja agradeço.
>>>
>>>
>>> Att;
>>>
>>> Michael Stein
>>> --
>>> gter list    https://eng.registro.br/mailman/listinfo/gter
> gter Info Page - .br<https://eng.registro.br/mailman/listinfo/gter>
> eng.registro.br
> Your email address: Your name (optional): You may enter a privacy password below. This provides only mild security, but should prevent others from messing with ...
>
>
>
>> gter Info Page - .br<https://eng.registro.br/mailman/listinfo/gter>
> gter Info Page - .br<https://eng.registro.br/mailman/listinfo/gter>
> eng.registro.br
> Your email address: Your name (optional): You may enter a privacy password below. This provides only mild security, but should prevent others from messing with ...
>
>
>
>> eng.registro.br
>> Your email address: Your name (optional): You may enter a privacy password
>> below. This provides only mild security, but should prevent others from
>> messing with ...
>>
>>
>>
>> --
>> gter list    https://eng.registro.br/mailman/listinfo/gter
> gter Info Page - .br<https://eng.registro.br/mailman/listinfo/gter>
> eng.registro.br
> Your email address: Your name (optional): You may enter a privacy password below. This provides only mild security, but should prevent others from messing with ...
>
>
>
>> gter Info Page - .br<https://eng.registro.br/mailman/listinfo/gter>
> gter Info Page - .br<https://eng.registro.br/mailman/listinfo/gter>
> eng.registro.br
> Your email address: Your name (optional): You may enter a privacy password below. This provides only mild security, but should prevent others from messing with ...
>
>
>
>> eng.registro.br
>> Your email address: Your name (optional): You may enter a privacy password
>> below. This provides only mild security, but should prevent others from
>> messing with ...
>>
>>
>>
>> --
>> gter list    https://eng.registro.br/mailman/listinfo/gter
> gter Info Page - .br<https://eng.registro.br/mailman/listinfo/gter>
> eng.registro.br
> Your email address: Your name (optional): You may enter a privacy password below. This provides only mild security, but should prevent others from messing with ...
>
>
>
> --
> gter list    https://eng.registro.br/mailman/listinfo/gter
> gter Info Page - .br<https://eng.registro.br/mailman/listinfo/gter>
> eng.registro.br
> Your email address: Your name (optional): You may enter a privacy password below. This provides only mild security, but should prevent others from messing with ...
>
>
>
> --
> gter list    https://eng.registro.br/mailman/listinfo/gter
>

-- 
Inoc.Dba 28278*100/262907*100